# changelog

author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.6.145
changelog:
  - !22093 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-148.0.0 to 6.6.0-149.0.0
  - gpio: rockchip: Stop calling pinctrl for set_direction
  - gpio: rockchip: mark the GPIO controller as sleeping
  - ext4: fix error message when rejecting the default hash
  - ext4: filesystems without casefold feature cannot be mounted with siphash
  - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx
  - mm/mremap: fix WARN with uffd that has remap events disabled
  - mm: clear uffd-wp PTE/PMD state on mremap()
  - userfaultfd: move userfaultfd_ctx struct to header file
  - spi: fix statistics allocation
  - Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
  - hwmon: (ibmpex) fix use-after-free in high/low store
  - icmp: fix NULL pointer dereference in icmp_tag_validation()
  - net/sched: act_ife: Fix metalist update behavior
  - net/sched: act_ife: avoid possible NULL deref
  - apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
  - spi: fix use-after-free on controller registration failure
  - PM: runtime: Fix a race condition related to device removal
  - apparmor: fix side-effect bug in match_char() macro usage
  - urma: Kernel-mode file for bugfix to move hashtable from alloc to active
  - ipv6: avoid overflows in ip6_datagram_send_ctl()
  - netfilter: nfnetlink_log: account for netlink header size
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
  - bpf: Fix incorrect pruning due to atomic fetch precision tracking
  - bpf: reject direct access to nullable PTR_TO_BUF pointers
  - bpf: Reject sleepable kprobe_multi programs at attach time
  - ub: udma: fix a bug related to free rcu mem
  - ub: ubase: Add a soft dependency declaration for the ubase driver
  - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed
  - ub: ubase: Verify the length of ctrlq rq msg
  - ub: ubase: debugfs supports tpg context query
  - perf: Make sure to use pmu_ctx->pmu for groups
  - perf: Fix kabi breakage of perf_output_handle
  - perf: Avoid the read if the count is already updated
  - perf: Extract a few helpers
  - irqchip/mbigen: hardcode gicr_base for HIP12
  - irqchip/mbigen: add HIP12 support for vtimer irq bypass
  - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking
  - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore
  - irqchip/mbigen: add check for GICv4.1 before enabling vtimer
  - gpio: rockchip: Stop calling pinctrl for set_direction
  - gpio: pca953x: fix wrong error probe return value
  - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
  - ASoC: fsl_sai: Add missing registers to cache default
  - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
  - ALSA: usb-audio: Update for native DSD support quirks
  - can: j1939: make j1939_session_activate() fail if device is no longer registered
  - drm/amd/display: Fix DP no audio issue
  - powercap: fix sscanf() error return value handling
  - powercap: fix race condition in register_control_type()
  - NFS: trace: show TIMEDOUT instead of 0x6e
  - ALSA: ac97: fix a double free in snd_ac97_controller_register()
  - ALSA: ac97bus: Use guard() for mutex locks
  - HID: quirks: work around VID/PID conflict for appledisplay
  - net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
  - net/mlx5e: Don't print error message due to invalid module
  - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
  - inet: ping: Fix icmp out counting
  - net: mscc: ocelot: Fix crash when adding interface under a lag
  - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
  - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
  - netfilter: nf_tables: fix memory leak in nf_tables_newrule()
  - gpio: pca953x: handle short interrupt pulses on PCAL devices
  - gpio: pca953x: Add support for level-triggered interrupts
  - gpio: pca953x: Utilise temporary variable for struct device
  - gpio: pca953x: Utilise dev_err_probe() where it makes sense
  - netfilter: nft_synproxy: avoid possible data-race on update operation
  - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM
  - ARM: dts: imx6q-ba16: fix RTC interrupt level
  - arm64: dts: add off-on-delay-us for usdhc2 regulator
  - scsi: ufs: core: Fix EH failure after W-LUN resume error
  - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
  - smb/client: fix NT_STATUS_NO_DATA_DETECTED value
  - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
  - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
  - NFS: Fix up the automount fs_context to use the correct cred
  - NFSv4: ensure the open stateid seqid doesn't go backwards
  - dm-snapshot: fix 'scheduling while atomic' on real-time kernels
  - alpha: don't reference obsolete termio struct for TC* constants
  - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
  - csky: fix csky_cmpxchg_fixup not working
  - nfsd: convert to new timestamp accessors
  - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
  - gpio: rockchip: mark the GPIO controller as sleeping
  - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
  - drm/pl111: Fix error handling in pl111_amba_probe
  - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
  - counter: 104-quad-8: Fix incorrect return value in IRQ handler
  - lib/crypto: aes: Fix missing MMU protection for AES S-box
  - mei: me: add nova lake point S DID
  - btrfs: always detect conflicting inodes when logging inode refs
  - net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
  - atm: Fix dma_free_coherent() size
  - NFSD: Fix permission check for read access to executable-only files
  - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads
  - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000
  - LoongArch: Adapt upstream backport for openEuler
  - urma: add rate limit for high-frequency error logs in ubmad and ubcm
  - ub:hisi-ubus: add soft dep of ummu for hisi_ubus
  - kprobes: avoid crash when rmmod/insmod after ftrace killed
  - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN
  - sched/fair: Clear rel_deadline when initializing forked entities
  - ub/ubmempfd: Fix issues from AI
  - ub/ubdevshm: Optimize print format
  - ub/ubdevshm: Fix issues from AI.
  - ub/ubdevshm: Bugfix for multi-Ops with same va.
  - ub/ubdevshm: Optimize functions to improve readability.
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
  - sched/ebpf: Fix bpf_sched_set_task_prefer_nid()
  - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed
  - LoongArch: KVM: rename extioi to eiointc
  - LoongArch: KVM: Remove duplicated cache attribute setting
  - LoongArch: KVM: Set page with write attribute if dirty track disabled
  - LoongArch: KVM: Simplify kvm_deliver_intr()
  - LoongArch: KVM: Rework kvm_send_pv_ipi()
  - LoongArch: KVM: Restore guest PMU if it is enabled
  - LoongArch: KVM: Add delay until timer interrupt injected
  - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code
  - LoongArch: KVM: Add PTW feature detection on new hardware
  - LoongArch: KVM: Remove unused returns and semicolons
  - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits
  - LoongArch: KVM: Add ecode parameter for exception handlers
  - LoongArch: KVM: Fully clear some CSRs when VM reboot
  - LoongArch: KVM: Fix multiple typos of KVM code
  - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel()
  - LoongArch: KVM: Remove unnecessary header include path
  - LoongArch: KVM: Set host with kernel mode when switch to VM mode
  - LoongArch: KVM: Fix typo issue about GCFG feature detection
  - LoongArch: KVM: Protect kvm_check_requests() with SRCU
  - LoongArch: KVM: Fix GPA size issue about VM
  - LoongArch: KVM: Adapt pch_pic alignment check
  - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu()
  - LoongArch: KVM: Adapt send_ipi_data() stack protector fix
  - LoongArch: KVM: Make function kvm_own_lbt() robust
  - erofs: add GFP_NOIO in the bio completion if needed
  - mm/rmap: fix incorrect pte restoration for lazyfree folios
  - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure
  - mm: remove boolean output parameters from folio_pte_batch_ext()
  - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags()
  - mm: smaller folio_pte_batch() improvements
  - mm: convert FPB_IGNORE_* into FPB_RESPECT_*
  - mm: fix folio_pte_batch() on XEN PV
  - !21961 urma: use user-specified ue_idx for bonding import exchange
  - udma：fix ub udma set dev name style
  - ub: udma: Delete the mailbox memory allocation and release in UDMA
  - ub: ubase: Release the MAILBOX memory when AE is received
  - urma: check driver and wq duration for conn_err
  - urma: rate-limit error logs across ubcore
  - urma: fix ubcore_get_device_by_eid without put.
  - urma: use user-specified ue_idx for bonding import exchange
  - urma: fix double put ubagg_dev.
  - urma: fix ubcore_get_device_by_eid uaf.
  - urma: Fix UAF risk in the ubagg_dev_exists function
  - urma: Add rate limiting to log within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors
  - urma: switch to acalloc for large memory allocation
  - urma: fix wk-jetty send implementation


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.7.146
changelog:
  - !22148 CVE-2026-31431
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
  - crypto: authencesn - Fix src offset when decrypting in-place
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
  - crypto: authenc - use memcpy_sglist() instead of null skcipher
  - crypto: algif_aead - snapshot IV for async AEAD requests
  - crypto: algif_aead - Revert to operating out-of-place
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  - crypto: scatterwalk - Backport memcpy_sglist()
  - crypto: algif_aead - Fix minimum RX size check for decryption


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.8.147
changelog:
  - !22175 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-149.0.0 to 6.6.0-151.0.0
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
  - netfilter: conntrack: add missing netlink policy validations
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
  - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
  - bridge: mrp: reject zero test interval to avoid OOM panic
  - netfilter: ipset: drop logically empty buckets in mtype_del
  - xfrm: prevent policy_hthresh.work from racing with netns teardown
  - netfilter: nft_ct: fix use-after-free in timeout object destroy
  - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
  - x86/platform/uv: Handle deconfigured sockets
  - x86/CPU: Fix FPDSS on Zen1
  - can: raw: fix ro->uniq use-after-free in raw_rcv()
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
  - net: skb: fix cross-cache free of KFENCE-allocated skb head
  - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
  - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup
  - bfq: Lock when clearing the q->elevator entry
  - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
  - ext4: publish jinode after initialization
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes
  - ext4: prevent partial update of the extents path
  - ext4: refactor ext4_ext_rm_idx() to index 'path'
  - ext4: reject mount if bigalloc with s_first_data_block != 0
  - ext4: fix use-after-free in update_super_work when racing with umount
  - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
  - platform/x86/amd/pmc: Add support for Van Gogh SoC
  - team: Move team device type change at the end of team_port_add
  - perf/x86: Fix potential bad container_of in intel_pmu_hw_config
  - x86/topo: Fix SNC topology mess
  - x86/topo: Replace x86_has_numa_in_package
  - x86/topo: Add topology_num_nodes_per_package()
  - x86/numa: Store extra copy of numa_nodes_parsed
  - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled
  - x86/smpboot: moves x86_topology to static initialize and truncate
  - x86/smpboot: remove redundant CONFIG_SCHED_SMT
  - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup
  - sched: Move sched domain name out of CONFIG_SCHED_DEBUG
  - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly
  - x86/mm: Don't print out SRAT table information
  - powerpc/smp: Dynamically build Powerpc topology
  - powerpc/smp: Avoid asym packing within thread_group of a core
  - powerpc/smp: Add __ro_after_init attribute
  - powerpc/smp: Disable MC domain for shared processor
  - powerpc/smp: Enable Asym packing for cores on shared processor
  - drm/i915/gt: Check set_default_submission() before deferencing
  - urma: change kzalloc into vzalloc for ubcore
  - ALSA: ctxfi: Limit PTP to a single page
  - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()
  - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete
  - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb
  - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop
  - ext4: convert inline data to extents when truncate exceeds inline size
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown
  - bridge: br_nd_send: linearize skb before parsing ND options
  - net: bonding: fix NULL deref in bond_debug_rlb_hash_show
  - can: gw: fix OOB heap access in cgw_csum_crc8_rel()
  - netfilter: ctnetlink: use netlink policy range checks
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc
  - mmc: vub300: fix NULL-deref on disconnect
  - X.509: Fix out-of-bounds access when parsing extensions
  - net: fix fanout UAF in packet_release() via NETDEV_UP race
  - af_key: validate families in pfkey_send_migrate()
  - openvswitch: defer tunnel netdev_put to RCU release
  - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear()
  - crypto: af_alg - limit RX SG extraction by receive buffer budget
  - perf/x86/intel: Add missing branch counters constraint apply
  - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface.
  - urma: move variable initialization before use in error branch


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.9.148
changelog:
  - !22247 sync pr 22246: Revert efi/cper ARM CPER type alignment
  - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs"


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.10.149
changelog:
  - !22435 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-151.0.0 to 6.6.0-152.0.0
  - HID: core: Mitigate potential OOB by removing bogus memset()
  - HID: core: Add printk_ratelimited variants to hid_warn() etc
  - HID: multitouch: Check to ensure report responses match the request
  - Bluetooth: MGMT: validate LTK enc_size on load
  - ceph: fix i_nlink underrun during async unlink
  - hwmon: (pmbus/core) Protect regulator operations with mutex
  - hwmon: (pmbus/core) Declare regulator notification function as void
  - dmaengine: idxd: Fix not releasing workqueue on .release()
  - driver/core: Fix kabi broken of platform_device/bus_type/device
  - driver core: platform: use generic driver_override infrastructure
  - hwmon: axi-fan: don't use driver_override as IRQ name
  - driver core: generalize driver_override in struct device
  - ceph: fix memory leaks in ceph_mdsc_build_path()
  - ceph: supply snapshot context in ceph_zero_partial_object()
  - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
  - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  - Bluetooth: MGMT: validate mesh send advertising payload length
  - Bluetooth: hci_event: move wake reason storage into validated event handlers
  - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
  - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()
  - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
  - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
  - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject
  - HID: core: clamp report_size in s32ton() to avoid undefined shift
  - HID: alps: fix NULL pointer dereference in alps_raw_event()
  - Input: uinput - fix circular locking dependency with ff-core
  - HID: apple: avoid memory leak in apple_report_fixup()
  - HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
  - mm/userfaultfd: fix hugetlb fault mutex hash calculation
  - rxrpc: proc: size address buffers for %pISpc output
  - dmaengine: idxd: Fix memory leak when a wq is reset
  - net/mlx5: lag: Check for LAG device before creating debugfs
  - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
  - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
  - blk-iocost: fix busy_level reset when no IOs complete
  - block: use min() instead of min_t()
  - blk-throttle: fix lower bps rate by throtl_trim_slice()
  - block: flush all throttled bios when deleting the cgroup
  - jbd2: increase IO priority of checkpoint
  - blk-throttle: don't take carryover for prioritized processing of metadata
  - blk-throttle: support prioritized processing of metadata
  - blk-throttle: fix lower control under super low iops limit
  - gfs2: fiemap page fault fix
  - x86/apic: Disable x2apic on resume if the kernel expects so
  - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
  - USB: usbcore: Introduce usb_bulk_msg_killable()
  - dmaengine: idxd: Fix possible invalid memory access after FLR
  - drm/ioc32: stop speculation on the drm_compat_ioctl path
  - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU"
  - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0
  - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
  - urma: fix potential parameter overflow in initialization
  - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk
  - tracing: Fix soft lockup when lseeking trace file
  - urma: query resource options by id.
  - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros
  - net: bonding: fix use-after-free in bond_xmit_broadcast()
  - bonding: do not set usable_slaves for broadcast mode
  - net: bonding: update the slave array for broadcast mode
  - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
  - net/sched: cls_flow: fix NULL pointer dereference on shared blocks
  - net: sched: act_csum: validate nested VLAN headers
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets
  - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
  - xfrm: esp: avoid in-place decrypt on shared skb frags
  - net/sched: sch_netem: fix out-of-bounds access in packet corruption
  - esp: fix skb leak with espintcp and async crypto
  - xfrm: Fix the usage of skb->sk
  - net/sched: cls_fw: fix NULL dereference of "old" filters before change()
  - net/sched: cls_fw: fix NULL pointer dereference on shared blocks
  - mm: memcontrol: don't throttle dying tasks on memory.high
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path
  - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
  - EDAC/mc: Fix error path ordering in edac_mc_alloc()
  - perf/x86/intel/uncore: Skip discovery table for offline dies


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.1.13.151
changelog:
  - !22969 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-154.0.0 to 6.6.0-155.0.0
  - Revert "net: unic: adapt to the change for ETS tsa and bw configuration permission"
  - Revert "net: unic: Notify MAMI when the LACP status changes"
  - Revert "net: unic: The unsupported VL rate limit value is displayed as 0"
  - Revert "driver core: enforce device_lock for driver_match_device()"
  - gpio: omap: do not register driver in probe()
  - vsock/test: verify socket options after setting them
  - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module
  - scsi: qla2xxx: Query FW again before proceeding with login
  - scsi: qla2xxx: Allow recovery for tape devices
  - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()
  - nilfs2: Fix potential block overflow that cause system hang
  - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req
  - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly
  - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store
  - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB
  - driver core: enforce device_lock for driver_match_device()
  - usb: typec: ucsi: skip connector validation before init
  - usb: typec: ucsi: validate connector number in ucsi_notify_common()
  - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
  - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
  - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests
  - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler
  - dpaa2-switch: do not clear any interrupts automatically
  - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom
  - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU.
  - spi: tegra114: Preserve SPI mode bits in def_command1_reg
  - spi: tegra: Fix a memory leak in tegra_slink_probe()
  - btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
  - hwmon: (occ) Mark occ_init_attribute() as __printf
  - drm/mgag200: fix mgag200_bmc_stop_scanout()
  - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi()
  - tipc: use kfree_sensitive() for session key material
  - net: don't touch dev->stats in BPF redirect paths
  - dpaa2-switch: add bounds check for if_id in IRQ handler
  - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
  - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
  - net: liquidio: Initialize netdev pointer before queue setup
  - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero
  - platform/x86: hp-bioscfg: Skip empty attribute names
  - platform/x86: intel_telemetry: Fix PSS event register mask
  - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
  - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice
  - wifi: mac80211: correctly check if CSA is active
  - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
  - wifi: cfg80211: Fix bitrate calculation overflow for HE rates
  - ASoC: tlv320adcx140: Propagate error codes during probe
  - ASoC: amd: yc: Fix microphone on ASUS M6500RE
  - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe
  - wifi: mac80211: collect station statistics earlier when disconnect
  - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free
  - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101)
  - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()
  - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list
  - netfilter: replace -EEXIST with -EBUSY
  - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk
  - HID: playstation: Center initial joystick axes to prevent spurious events
  - HID: intel-ish-hid: Reset enum_devices_done before enumeration
  - btrfs: fix reservation leak in some error paths when inserting inline extent
  - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL
  - HID: intel-ish-hid: Update ishtp bus match to support device ID table
  - LoongArch: Enable exception fixup for specific ADE subcode
  - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED
  - block,bfq: fix aux stat accumulation destination
  - net: usb: sr9700: support devices with virtual driver CD
  - wifi: wlcore: ensure skb headroom before skb_push
  - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
  - tracing: Fix ftrace event field alignments
  - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures
  - binderfs: fix ida_alloc_max() upper bound
  - binder: fix BR_FROZEN_REPLY error log
  - ublk: fix deadlock when reading partition table
  - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"
  - ARM: 9468/1: fix memset64() on big-endian
  - rbd: check for EOD after exclusive lock is ensured to be held
  - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains
  - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup
  - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset
  - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup
  - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state
  - platform/x86: intel_telemetry: Fix swapped arrays in PSS output
  - !22835 config: x86: Fix openeuler_defconfig to resolve CI failure
  - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig
  - config: x86: Fix CI "checkdefconfig" warning by updating defconfig
  - !22778 revert mpam from openEuler-24.03-LTS_SP1
  - Revert "x86: Decouple resctrl with resctrl-mpam"
  - Revert "x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe()"
  - Revert "x86/resctrl: Remove hard-coded memory bandwidth limit"
  - Revert "x86/resctrl: Read supported bandwidth sources from CPUID"
  - Revert "x86/resctrl: Implement new mba_MBps throttling heuristic"
  - Revert "x86/resctrl: Remove redundant variable in mbm_config_write_domain()"
  - Revert "x86/resctrl: Free rmid_ptrs from resctrl_exit()"
  - Revert "x86/resctrl: Create helper for RMID allocation and mondata dir creation"
  - Revert "x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare()"
  - Revert "x86/resctrl: Track the closid with the rmid"
  - Revert "x86/resctrl: Access per-rmid structures by index"
  - Revert "x86/resctrl: Allow RMID allocation to be scoped by CLOSID"
  - Revert "x86/resctrl: Track the number of dirty RMID a CLOSID has"
  - Revert "x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding"
  - Revert "x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid"
  - Revert "x86/resctrl: Move CLOSID/RMID matching and setting to use helpers"
  - Revert "x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow"
  - Revert "x86/resctrl: Queue mon_event_read() instead of sending an IPI"
  - Revert "x86/resctrl: Allow resctrl_arch_rmid_read() to sleep"
  - Revert "x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read()"
  - Revert "x86/resctrl: Make resctrl_mounted checks explicit"
  - Revert "x86/resctrl: Move alloc/mon static keys into helpers"
  - Revert "x86/resctrl: Make rdt_enable_key the arch's decision to switch"
  - Revert "x86/resctrl: Add helpers for system wide mon/alloc capable"
  - Revert "x86/resctrl: Add CPU online callback for resctrl work"
  - Revert "x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU"
  - Revert "x86/resctrl: Add CPU offline callback for resctrl work"
  - Revert "x86/resctrl: Move domain helper migration into resctrl_offline_cpu()"
  - Revert "x86/resctrl: Separate arch and fs resctrl locks"
  - Revert "x86/resctrl: Remove lockdep annotation that triggers false positive"
  - Revert "Documentation/x86: Document that resctrl bandwidth control units are MiB"
  - Revert "Documentation/x86: Fix title underline length"
  - Revert "x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline"
  - Revert "x86/resctrl: Switch to new Intel CPU model defines"
  - Revert "x86/resctrl: Pass domain to target CPU"
  - Revert "x86/resctrl: Simplify call convention for MSR update functions"
  - Revert "x86/resctrl: Rename pseudo_lock_event.h to trace.h"
  - Revert "x86/resctrl: Add tracepoint for llc_occupancy tracking"
  - Revert "x86/resctrl: Don't try to free nonexistent RMIDs"
  - Revert "cpu: Move CPU hotplug function declarations into their own header"
  - Revert "cpu: Drop "extern" from function declarations in cpuhplock.h"
  - Revert "cacheinfo: Add function to get cacheinfo for a given CPU and cache level"
  - Revert "x86/resctrl: Replace open coded cacheinfo searches"
  - Revert "x86/resctrl: Prepare for new domain scope"
  - Revert "x86/resctrl: Prepare to split rdt_domain structure"
  - Revert "x86/resctrl: Prepare for different scope for control/monitor operations"
  - Revert "x86/resctrl: Split the rdt_domain and rdt_hw_domain structures"
  - Revert "x86/resctrl: Add node-scope to the options for feature scope"
  - Revert "x86/resctrl: Introduce snc_nodes_per_l3_cache"
  - Revert "x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems"
  - Revert "x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files"
  - Revert "x86/resctrl: Add a new field to struct rmid_read for summation of domains"
  - Revert "x86/resctrl: Initialize on-stack struct rmid_read instances"
  - Revert "x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function"
  - Revert "x86/resctrl: Allocate a new field in union mon_data_bits"
  - Revert "x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files"
  - Revert "x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode"
  - Revert "x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter"
  - Revert "x86/resctrl: Make __mon_event_count() handle sum domains"
  - Revert "x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems"
  - Revert "x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode"
  - Revert "x86/resctrl: Update documentation with Sub-NUMA cluster changes"
  - Revert "x86/resctrl: Fix arch_mbm_* array overrun on SNC"
  - Revert "x86/resctrl: Avoid overflow in MB settings in bw_validate()"
  - Revert "x86/resctrl: Annotate get_mem_config() functions as __init"
  - Revert "x86/resctrl: Slightly clean-up mbm_config_show()"
  - Revert "x86/resctrl: Support Sub-NUMA cluster mode SNC6"
  - Revert "x86/resctrl: Use kthread_run_on_cpu()"
  - Revert "x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags"
  - Revert "x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control"
  - Revert "x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event"
  - Revert "x86/resctrl: Compute memory bandwidth for all supported events"
  - Revert "x86/resctrl: Make mba_sc use total bandwidth if local is not supported"
  - Revert "x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories"
  - Revert "x86/resctrl: Add write option to "mba_MBps_event" file"
  - Revert "x86/resctrl: Document the new "mba_MBps_event" file"
  - Revert "x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors"
  - Revert "x86/resctrl: Add a helper to avoid reaching into the arch code resource list"
  - Revert "x86/resctrl: Remove fflags from struct rdt_resource"
  - Revert "x86/resctrl: Use schema type to determine how to parse schema values"
  - Revert "x86/resctrl: Use schema type to determine the schema format string"
  - Revert "x86/resctrl: Remove data_width and the tabular format"
  - Revert "x86/resctrl: Add max_bw to struct resctrl_membw"
  - Revert "x86/resctrl: Generate default_ctrl instead of sharing it"
  - Revert "x86/resctrl: Add helper for setting CPU default properties"
  - Revert "x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid()"
  - Revert "x86/resctrl: Expose resctrl fs's init function to the rest of the kernel"
  - Revert "x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code"
  - Revert "x86/resctrl: Move resctrl types to a separate header"
  - Revert "x86/resctrl: Add an arch helper to reset one resource"
  - Revert "x86/resctrl: Move monitor exit work to a resctrl exit call"
  - Revert "x86/resctrl: Move monitor init work to a resctrl init call"
  - Revert "x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers"
  - Revert "x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h"
  - Revert "x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC"
  - Revert "x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers"
  - Revert "x86/resctrl: Move mba_mbps_default_event init to filesystem code"
  - Revert "x86/resctrl: Move mbm_cfg_mask to struct rdt_resource"
  - Revert "x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions"
  - Revert "x86/resctrl: Allow an architecture to disable pseudo lock"
  - Revert "x86/resctrl: Make prefetch_disable_bits belong to the arch code"
  - Revert "x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr"
  - Revert "x86/resctrl: Move RFTYPE flags to be managed by resctrl"
  - Revert "x86/resctrl: Handle throttle_mode for SMBA resources"
  - Revert "x86/resctrl: Move get_config_index() to a header"
  - Revert "x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers"
  - Revert "cpumask: kernel-doc cleanups and additions"
  - Revert "cpumask: add cpumask_any_and_but()"
  - Revert "cpumask: add cpumask_weight_andnot()"
  - Revert "cpumask: Introduce cpumask_first_and_and()"
  - Revert "cpumask: Switch from inline to __always_inline"
  - Revert "cpumask: Relax cpumask_any_but()"
  - Revert "find: Add find_first_andnot_bit()"
  - Revert "cpumask: Add cpumask_{first,next}_andnot() API"
  - Revert "ptrace: Convert ptrace_attach() to use lock guards"
  - Revert "kernfs: sysfs: support custom llseek method for sysfs entries"
  - Revert "kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy()"
  - Revert "kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy()"
  - Revert "kernfs: mount: Remove unnecessary ‘NULL’ values from knparent"
  - Revert "kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn()."
  - Revert "kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry()."
  - Revert "kernfs: Acquire kernfs_rwsem in kernfs_node_dentry()."
  - Revert "kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy()"
  - Revert "kernfs: Use RCU to access kernfs_node::parent."
  - Revert "kernfs: Use RCU to access kernfs_node::name."
  - Revert "kernfs: annotate different lockdep class for of->mutex of writable files"
  - Revert "kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked()."
  - Revert "kernfs: Move dput() outside of the RCU section."
  - Revert "x86/resctrl: Optimize cpumask_any_housekeeping()"
  - Revert "x86/resctrl: Remove the limit on the number of CLOSID"
  - Revert "x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_""
  - Revert "x86/resctrl: Check all domains are offline in resctrl_exit()"
  - Revert "x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point"
  - Revert "x86/resctrl: Drop __init/__exit on assorted symbols"
  - Revert "x86/resctrl: Move is_mba_sc() out of core.c"
  - Revert "x86/resctrl: Add end-marker to the resctrl_event_id enum"
  - Revert "x86/resctrl: Expand the width of domid by replacing mon_data_bits"
  - Revert "x86/resctrl: Split trace.h"
  - Revert "x86/resctrl: Add 'resctrl' to the title of the resctrl documentation"
  - Revert "fs/resctrl: Add boiler plate for external resctrl code"
  - Revert "x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl"
  - Revert "x86/resctrl: Move enum resctrl_event_id to resctrl.h"
  - Revert "x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs"
  - Revert "x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h"
  - Revert "x86/resctrl: Squelch whitespace anomalies in resctrl core code"
  - Revert "x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context()"
  - Revert "x86/resctrl: Relax some asm #includes"
  - Revert "x86/resctrl: Always initialise rid field in rdt_resources_all[]"
  - Revert "x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name"
  - Revert "x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl"
  - Revert "MAINTAINERS: Add reviewers for fs/resctrl"
  - Revert "fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex"
  - Revert "x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem"
  - Revert "resctrl: get rid of pointless debugfs_file_{get,put}()"
  - Revert "fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters"
  - Revert "fs/resctrl: Optimize code in rdt_get_tree()"
  - Revert "x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest"
  - Revert "x86,fs/resctrl: Consolidate monitor event descriptions"
  - Revert "x86,fs/resctrl: Replace architecture event enabled checks"
  - Revert "x86/resctrl: Remove the rdt_mon_features global variable"
  - Revert "x86,fs/resctrl: Prepare for more monitor events"
  - !22737 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-152.0.0 to 6.6.0-154.0.0
  - Bluetooth: hci_sync: annotate data-races around hdev->req_status
  - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
  - fbcon: check return value of con2fb_acquire_newinfo()
  - media: pvrusb2: fix URB leak in pvr2_send_request_ex
  - unshare: fix unshare_fs() handling
  - bridge: br_nd_send: validate ND option lengths
  - obmm: add VMA access for ptrace/GDB on PFNMAP regions
  - obmm: support VMA split with ownership-aligned attributes
  - obmm: refactor ownership tracking for PMD-granularity support
  - obmm: fix PTE protection bits for READWRITE mappings
  - mm: export split_vma for module use
  - USB: core: Limit the length of unkillable synchronous timeouts
  - udp: Fix wildcard bind conflict check when using hash2
  - tcp: Rearrange tests in inet_csk_bind_conflict().
  - usb: dwc3: gadget: Move vbus draw to workqueue context
  - usb: class: cdc-wdm: fix reordering issue in read code path
  - x86,fs/resctrl: Prepare for more monitor events
  - x86/resctrl: Remove the rdt_mon_features global variable
  - x86,fs/resctrl: Replace architecture event enabled checks
  - x86,fs/resctrl: Consolidate monitor event descriptions
  - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest
  - fs/resctrl: Optimize code in rdt_get_tree()
  - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters
  - resctrl: get rid of pointless debugfs_file_{get,put}()
  - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem
  - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex
  - MAINTAINERS: Add reviewers for fs/resctrl
  - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl
  - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name
  - x86/resctrl: Always initialise rid field in rdt_resources_all[]
  - x86/resctrl: Relax some asm #includes
  - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context()
  - x86/resctrl: Squelch whitespace anomalies in resctrl core code
  - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h
  - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs
  - x86/resctrl: Move enum resctrl_event_id to resctrl.h
  - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl
  - fs/resctrl: Add boiler plate for external resctrl code
  - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation
  - x86/resctrl: Split trace.h
  - x86/resctrl: Expand the width of domid by replacing mon_data_bits
  - x86/resctrl: Add end-marker to the resctrl_event_id enum
  - x86/resctrl: Move is_mba_sc() out of core.c
  - x86/resctrl: Drop __init/__exit on assorted symbols
  - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point
  - x86/resctrl: Check all domains are offline in resctrl_exit()
  - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_"
  - x86/resctrl: Remove the limit on the number of CLOSID
  - x86/resctrl: Optimize cpumask_any_housekeeping()
  - kernfs: Move dput() outside of the RCU section.
  - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked().
  - kernfs: annotate different lockdep class for of->mutex of writable files
  - kernfs: Use RCU to access kernfs_node::name.
  - kernfs: Use RCU to access kernfs_node::parent.
  - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy()
  - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry().
  - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry().
  - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn().
  - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent
  - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy()
  - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy()
  - kernfs: sysfs: support custom llseek method for sysfs entries
  - ptrace: Convert ptrace_attach() to use lock guards
  - cpumask: Add cpumask_{first,next}_andnot() API
  - find: Add find_first_andnot_bit()
  - cpumask: Relax cpumask_any_but()
  - cpumask: Switch from inline to __always_inline
  - cpumask: Introduce cpumask_first_and_and()
  - cpumask: add cpumask_weight_andnot()
  - cpumask: add cpumask_any_and_but()
  - cpumask: kernel-doc cleanups and additions
  - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers
  - x86/resctrl: Move get_config_index() to a header
  - x86/resctrl: Handle throttle_mode for SMBA resources
  - x86/resctrl: Move RFTYPE flags to be managed by resctrl
  - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr
  - x86/resctrl: Make prefetch_disable_bits belong to the arch code
  - x86/resctrl: Allow an architecture to disable pseudo lock
  - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions
  - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource
  - x86/resctrl: Move mba_mbps_default_event init to filesystem code
  - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers
  - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC
  - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h
  - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers
  - x86/resctrl: Move monitor init work to a resctrl init call
  - x86/resctrl: Move monitor exit work to a resctrl exit call
  - x86/resctrl: Add an arch helper to reset one resource
  - x86/resctrl: Move resctrl types to a separate header
  - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code
  - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel
  - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid()
  - x86/resctrl: Add helper for setting CPU default properties
  - x86/resctrl: Generate default_ctrl instead of sharing it
  - x86/resctrl: Add max_bw to struct resctrl_membw
  - x86/resctrl: Remove data_width and the tabular format
  - x86/resctrl: Use schema type to determine the schema format string
  - x86/resctrl: Use schema type to determine how to parse schema values
  - x86/resctrl: Remove fflags from struct rdt_resource
  - x86/resctrl: Add a helper to avoid reaching into the arch code resource list
  - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors
  - x86/resctrl: Document the new "mba_MBps_event" file
  - x86/resctrl: Add write option to "mba_MBps_event" file
  - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories
  - x86/resctrl: Make mba_sc use total bandwidth if local is not supported
  - x86/resctrl: Compute memory bandwidth for all supported events
  - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event
  - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control
  - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags
  - x86/resctrl: Use kthread_run_on_cpu()
  - x86/resctrl: Support Sub-NUMA cluster mode SNC6
  - x86/resctrl: Slightly clean-up mbm_config_show()
  - x86/resctrl: Annotate get_mem_config() functions as __init
  - x86/resctrl: Avoid overflow in MB settings in bw_validate()
  - x86/resctrl: Fix arch_mbm_* array overrun on SNC
  - x86/resctrl: Update documentation with Sub-NUMA cluster changes
  - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Make __mon_event_count() handle sum domains
  - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter
  - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Allocate a new field in union mon_data_bits
  - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function
  - x86/resctrl: Initialize on-stack struct rmid_read instances
  - x86/resctrl: Add a new field to struct rmid_read for summation of domains
  - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Introduce snc_nodes_per_l3_cache
  - x86/resctrl: Add node-scope to the options for feature scope
  - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures
  - x86/resctrl: Prepare for different scope for control/monitor operations
  - x86/resctrl: Prepare to split rdt_domain structure
  - x86/resctrl: Prepare for new domain scope
  - x86/resctrl: Replace open coded cacheinfo searches
  - cacheinfo: Add function to get cacheinfo for a given CPU and cache level
  - cpu: Drop "extern" from function declarations in cpuhplock.h
  - cpu: Move CPU hotplug function declarations into their own header
  - x86/resctrl: Don't try to free nonexistent RMIDs
  - x86/resctrl: Add tracepoint for llc_occupancy tracking
  - x86/resctrl: Rename pseudo_lock_event.h to trace.h
  - x86/resctrl: Simplify call convention for MSR update functions
  - x86/resctrl: Pass domain to target CPU
  - x86/resctrl: Switch to new Intel CPU model defines
  - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline
  - Documentation/x86: Fix title underline length
  - Documentation/x86: Document that resctrl bandwidth control units are MiB
  - x86/resctrl: Remove lockdep annotation that triggers false positive
  - x86/resctrl: Separate arch and fs resctrl locks
  - x86/resctrl: Move domain helper migration into resctrl_offline_cpu()
  - x86/resctrl: Add CPU offline callback for resctrl work
  - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU
  - x86/resctrl: Add CPU online callback for resctrl work
  - x86/resctrl: Add helpers for system wide mon/alloc capable
  - x86/resctrl: Make rdt_enable_key the arch's decision to switch
  - x86/resctrl: Move alloc/mon static keys into helpers
  - x86/resctrl: Make resctrl_mounted checks explicit
  - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read()
  - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep
  - x86/resctrl: Queue mon_event_read() instead of sending an IPI
  - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow
  - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers
  - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid
  - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding
  - x86/resctrl: Track the number of dirty RMID a CLOSID has
  - x86/resctrl: Allow RMID allocation to be scoped by CLOSID
  - x86/resctrl: Access per-rmid structures by index
  - x86/resctrl: Track the closid with the rmid
  - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare()
  - x86/resctrl: Create helper for RMID allocation and mondata dir creation
  - x86/resctrl: Free rmid_ptrs from resctrl_exit()
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain()
  - x86/resctrl: Implement new mba_MBps throttling heuristic
  - x86/resctrl: Read supported bandwidth sources from CPUID
  - x86/resctrl: Remove hard-coded memory bandwidth limit
  - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe()
  - x86: Decouple resctrl with resctrl-mpam
  - crypto: hisilicon - remove unused and non-public APIs for qm and sec
  - crypto: hisilicon/qm - drop redundant variable initialization
  - crypto: hisilicon/qm - remove else after return
  - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item
  - crypto: hisilicon - fix the format string type error
  - crypto: hisilicon/sec2 - prevent req used-after-free for sec
  - crypto: hisilicon - add device load query functionality to debugfs
  - crypto: hisilicon/qm - increase wait time for mailbox
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write()
  - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time"
  - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time"
  - crypto: hisilicon/qm - move the barrier before writing to the mailbox register
  - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip
  - virtCCA-Live-Migration: Add host agent support for CVM live migration
  - fix migvm_queue_dev_mmap buffer check
  - gpiolib: acpi: Fix potential out-of-boundary left shift
  - bpf/selftests: test_select_reuseport_kern: Remove unused header
  - Revert "net: Remove conditional threaded-NAPI wakeup based on task state."
  - Revert "net: Allow to use SMP threads for backlog NAPI."
  - ksmbd: fix recursive locking in RPC handle list access
  - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins
  - mptcp: avoid dup SUB_CLOSED events after disconnect
  - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0
  - drm/msm/a6xx: fix bogus hwcg register updates
  - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver
  - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
  - net/sched: act_ife: convert comma to semicolon
  - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate()
  - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
  - wifi: mac80211: move TDLS work to wiphy work
  - ksmbd: Fix race condition in RPC handle list access
  - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
  - ksmbd: smbd: fix dma_unmap_sg() nents
  - mei: trace: treat reg parameter as string
  - mm/kfence: randomize the freelist on initialization
  - drm/amdgpu/gfx11: fix wptr reset in KGQ init
  - drm/amdgpu/gfx10: fix wptr reset in KGQ init
  - drm/amdgpu/soc21: fix xclk for APUs
  - drm/imx/tve: fix probe device leak
  - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep
  - flex_proportions: make fprop_new_period() hardirq safe
  - selftests: mptcp: join: fix local endp not being tracked
  - mptcp: only reset subflow errors when propagated
  - scsi: qla2xxx: edif: Fix dma_free_coherent() size
  - gpio: pca953x: mask interrupts in irq shutdown
  - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO
  - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()
  - ASoC: fsl: imx-card: Do not force slot width to sample width
  - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target
  - riscv: compat: fix COMPAT_UTS_MACHINE definition
  - pinctrl: meson: mark the GPIO controller as sleeping
  - dma/pool: distinguish between missing and exhausted atomic pools
  - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler
  - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion
  - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()
  - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload
  - net: bridge: fix static key check
  - nfc: nci: Fix race between rfkill and nci_unregister_device().
  - net/mlx5e: Account for netdev stats in ndo_get_stats64
  - net/mlx5e: Report rx_discards_phy via rx_dropped
  - ice: stop counting UDP csum mismatch as rx_errors
  - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
  - rocker: fix memory leak in rocker_world_port_post_fini()
  - net: wwan: t7xx: fix potential skb->frags overflow in RX path
  - ipv6: use the right ifindex when replying to icmpv6 from localhost
  - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()
  - octeon_ep: Fix memory leak in octep_device_setup()
  - net: bcmasp: fix early exit leak with fixed phy
  - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()
  - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
  - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated
  - net/oenetcls: free sk entry hash on ntuple cleanup
  - sched/fair: Fix overflow in vruntime_eligible()
  - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics
  - sched/fair: Mark m*_vruntime() with __maybe_unused
  - sched/fair: Clear rel_deadline when initializing forked entities
  - Revert "sched/fair: Clear rel_deadline when initializing forked entities"
  - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE
  - ceph: add a bunch of missing ceph_path_info initializers
  - blk-cgroup: skip dying blkg in blkcg_activate_policy()
  - urma: fix the panic when ipourma module is repeatedly loaded
  - net: ipa: fix event ring index not programmed for IPA v5.0+
  - net/oenetcls: remove duplicated linux/inet.h include
  - net/oenetcls: fix mode-0 init rollback for ntuple resources
  - net/oenetcls: fix RPS CPU index scaling bias
  - net/oenetcls: Add rps policy switch for phy NIC
  - net/oenetcls: Make OENETCLS default as module
  - net/oenetcls: Support ipv6 for ntuple mode
  - net/oenetcls: Supports rxq multiplexing
  - net/oenetcls: Add local flow NUMA-aware rps
  - net/oenetcls: Fix possible hash collision issue
  - net/oenetcls: Prioritize oenetcls hooks over rps
  - net/oenetcls: Add mode 2 for rps numa affinity
  - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
  - ptrace: Fix kabi breakage in struct task_struct
  - ptrace: slightly saner 'get_dumpable()' logic
  - urma: Enable RH2D streaming by IPoURMA
  - urma: fix spinlock usage in ubagg_get_seg_info function
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
  - apei: use blocking notifier for page offline policy chain
  - urma: fix reference count imbalance in ubagg and uburma modules
  - powerpc, perf: Check that current->mm is alive before getting user callchain
  - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device
  - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM
  - ub:ubus: change the condition of io decoder creating page table or not
  - net: unic: The unsupported VL rate limit value is displayed as 0
  - net: unic: Notify MAMI when the LACP status changes
  - net: unic: adapt to the change for ETS tsa and bw configuration permission
  - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg()
  - iommu: Optimize the iommu PLBI Framework
  - iommu/ummu: remove swap operation when ungrant
  - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation
  - perf/x86/intel/uncore: Fix die ID init and look up bugs
  - scsi: target: tcm_loop: Drain commands in target_reset handler


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.1.14.152
changelog:
  - !23144 sync CVE LTS and bugfix from OLK-6.6 from 14ed6c3948b1 to b39d11626963
  - sched: idle: Make skipping governor callbacks more consistent
  - cpuidle: Skip governor when only one idle state is available
  - vxlan: validate ND option lengths in vxlan_na_create
  - net: use skb_header_pointer() for TCPv4 GSO frag_off check
  - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
  - USB: serial: option: add Telit FN920C04 RNDIS compositions
  - f2fs: fix to avoid mapping wrong physical block for swapfile
  - f2fs: fix zoned block device information initialization
  - f2fs: fix to avoid UAF in f2fs_write_end_io()
  - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes
  - f2fs: fix out-of-bounds access in sysfs attribute read/write
  - f2fs: fix to add gc count stat in f2fs_gc_range
  - fbdev: smscufx: properly copy ioctl memory to kernelspace
  - fbdev: rivafb: fix divide error in nv3_arb()
  - Revert "wireguard: device: enable threaded NAPI"
  - gpiolib: acpi: Fix gpio count with string references
  - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()
  - ASoC: cs42l43: Correct handling of 3-pole jack load detection
  - platform/x86: panasonic-laptop: Fix sysfs group leak in error path
  - platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro
  - ASoC: amd: yc: Add quirk for HP 200 G2a 16
  - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9
  - drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used
  - romfs: check sb_set_blocksize() return value
  - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel
  - ALSA: hda/realtek: Add quirk for Inspur S14-G1
  - gpio: sprd: Change sprd_gpio lock to raw_spin_lock
  - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list
  - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
  - PCI: endpoint: Avoid creating sub-groups asynchronously
  - PCI: endpoint: Remove unused field in struct pci_epf_group
  - Revert "driver core: enforce device_lock for driver_match_device()"
  - driver core: enforce device_lock for driver_match_device()
  - !23084 sync CVE LTS and bugfix from OLK-6.6 from 8238b832b9ac to 14ed6c3948b1
  - net: skbuff: preserve shared-frag marker during coalescing
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers
  - powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.1.15.153
changelog:
  - !23824 sync CVE LTS and bugfix from OLK-6.6 from af2b85218113 to 62d67c0aee60
  - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
  - iommu/ummu: Enable separated SVA page table by default
  - usbip: validate number_of_packets in usbip_pack_ret_submit()
  - usb: gadget: f_hid: don't call cdev_init while cdev in use
  - urma: fix dev cap struct length by reserved
  - urma: fix ipourma eid setup ordering
  - crypto: hisilicon/hpre: implement full backlog support for hpre driver
  - crypto: hisilicon/sec2 - restore iv for ctr mode
  - crypto: hisilicon/sec2 - fix resource leakage issues in non-backlog mode
  - crypto: hisilicon/sec2 - fix UAF in sec_alg_send_backlog
  - crypto: hisilicon/zip - add backlog support for zip
  - iommu/vt-d: Clear Present bit before tearing down context entry
  - netfilter: nf_tables: reject immediate NF_QUEUE verdict
  - xfrm: account XFRMA_IF_ID in aevent size calculation
  - mm/filemap: fix filemap_alloc_folio_local() return NULL with GFP_NOFAIL
  - cpufreq: conservative: Simplify frequency limit handling
  - cpufreq: Avoid redundant target() calls for unchanged limits
  - cpufreq: Fix typo in comment
  - arm64: smp: Do not mark secondary CPUs possible under nosmp
  - cpufreq: Documentation: fix freq_step description
  - cpufreq: Documentation: fix sampling_down_factor documentation range
  - rethook: Use tsk->on_cpu to check task execution state
  - rethook: Remove warning messages printed for finding return address of a frame.
  - smb: client: reject userspace cifs.spnego descriptions
  - urma: remove the redundant update of the tx_ring in error branch
  - virtcca huk-based key encryption
  - xfrm_user: fix info leak in build_mapping()
  - fbdev: defio: Remove unused variable 'fbdefio' to fix build warning
  - fbdev: defio: fix KABI breakage in struct fb_deferred_io and struct fb_info
  - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info
  - fbdev/deferred-io: Always call get_page() for framebuffer pages
  - fbdev/deferred-io: Clean up pageref on lastclose
  - iommu/vt-d: Clear Present bit before tearing down PASID entry
  - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ
  - urma: fix cm payload and async bind callback
  - ub: udma: modify the UDMA document.
  - tcp: restore kABI for syn_recv_sock() backport
  - tcp: fix potential race in tcp_v6_syn_recv_sock()
  - 8021q: delete cleared egress QoS mappings
  - 8021q: use RCU for egress QoS mappings
  - net: af_key: zero aligned sockaddr tail in PF_KEY exports
  - vhost: move vdpa group bound check to vhost_vdpa
  - x86-64: rename misleadingly named '__copy_user_nocache()' function
  - ipvs: skip ipv6 extension headers for csum checks
  - drm/amd/display: Fix dc_link NULL handling in HPD init
  - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl
  - smb: client: validate the whole DACL before rewriting it in cifsacl
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF
  - eventpoll: move epi_fget() up
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}()
  - eventpoll: kill __ep_remove()
  - eventpoll: split __ep_remove()
  - eventpoll: use hlist_is_singular_node() in __ep_remove()
  - mm/page_alloc: clear page->private in free_pages_prepare()
  - net: Drop the lock in skb_may_tx_timestamp()
  - KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT
  - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers
  - mm/vmscan: fix wrong callback in shrinker_v2_to_v1_scan_objects()
  - ipvs: do not keep dest_dst if dev is going down
  - RDMA/hns: Fix log flood after cmd_mbox failure
  - xfrm: esp: restore combined single-frag length gate
  - obmm: validate VMA identity via vm_ops before accessing vm_file
  - obmm: add PMD huge entry support for ptrace/GDB vma access
  - obmm: fix VMA access for ptrace/GDB on export regions
  - obmm: fix page table walk for ownership permission updates
  - obmm: reject MAP_PRIVATE
  - !23644 sync sentry modules bugfix patches
  - drivers/ub/sentry: enhance sentry module error handling and logging observability
  - drivers/ub/sentry: remove send/recv counter-based tjetty rebuild mechanism
  - drivers/ub/sentry: delete unimportant logs and optimize some log content
  - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.1.17.155
changelog:
  * Mon Jun 22 2026 Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.1.16.154
  - !24099 CVE-2026-46331
  - net/sched: fix pedit partial COW leading to page cache corruption


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: gaihuiying <eaglegai@163.com> - 1:2.4.7-15
changelog:
  - fix handling of multiple PPD: keywords from filters related to CVE-2026-34980
    fix a regression in shared printing from non-local accounts related to CVE-2026-27447


author: lizhengde <lizhengde@xfusion.com> - 6.1.1-27
changelog:
  - Type:CVE
  - CVE:CVE-2026-30997
  - SUG:NA
  - DESC:avcodec/av1dec: check that primary_ref_frame is within range (CVE-2026-30997)


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: lizhengde <lizhengde@xfusion.com> - 1.16.2-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-53702
  - SUG:NA
  - DESC:Stack buffer overflow in GStreamer H.265 parser. Fix incorrect loop bound.


author: yaoxin <1024769339@qq.com> - 1.8.0-4
changelog:
  - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894,
    CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777


author: Funda Wang <fundawang@yeah.net> - 4:5.38.0-11
changelog:
  - split out patch adding link to libperl.so into two separated patches,
    and sync it with mageia, which is a better version than fedora
  - disable cleaning empty perl directories
  - use git lfs storage


author: wangkai <13474090681@163.com> - 3.13.5-1
changelog:
  - Update to 3.13.5
    * Fix CVE-2026-22815, CVE-2026-34513, CVE-2026-34514, CVE-2026-34516,
      CVE-2026-34517, CVE-2026-34518, CVE-2026-34519, CVE-2026-34520, CVE-2026-34525


author: yaoxin <1024769339@qq.com> - 3.14.1-1
changelog:
  - Update to 3.14.1 for fix CVEs: CVE-2026-54273,CVE-2026-54274,CVE-2026-54275
    CVE-2026-54276,CVE-2026-54277,CVE-2026-54278,CVE-2026-54279,CVE-2026-54280


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 1.26.18-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Prevent issue in HTTPResponse().read() when decoded_content is True and then False


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: Yu Peng <yupeng@kylinos.cn> - 5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Make autoconf-utrace-via-tracepoints.c work with struct folio.


author: langfei <langfei@huawei.com> - 2024a-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees;
  -	No need for America/Coyhaique in zonenow.tab.


author: Liu Chao <liuchao173@huawei.com> - 2024a-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Moldova has used EU transition times since 2022
  	Most of BC moves from PDT to Pacific Time on 03-09
  	Delay America/Vancouver tm_isdst transition


